$ rpki-client -vvf repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft File: 286C9A362D81776DD721F49AC1EDBE51BF15D486.mft (raw, json) Hash identifier: yRA+5hSURVbPxI9PallUQpTxfR7/RLH/kSQfoRlW4Hg= Subject key identifier: 0D:B2:68:23:94:F7:EA:68:11:A9:25:76:C4:13:50:3A:A5:B3:B7:F1 Authority key identifier: 28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 Certificate issuer: /CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Certificate serial: 307C2BD7AAEB59CBD716805DA677B455DB48BBAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft Manifest number: 0171 Signing time: Mon 25 Nov 2024 10:11:19 +0000 Manifest this update: Mon 25 Nov 2024 10:06:19 +0000 Manifest next update: Thu 28 Nov 2024 20:05:19 +0000 Files and hashes: 1: 286C9A362D81776DD721F49AC1EDBE51BF15D486.crl (hash: tIlXKpfTpI1DVh5qYc/JXIjcHKyaf2Qmgxu27r2wL2A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 11:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:7c:2b:d7:aa:eb:59:cb:d7:16:80:5d:a6:77:b4:55:db:48:bb:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Validity Not Before: Nov 25 10:06:19 2024 GMT Not After : Nov 28 20:05:19 2024 GMT Subject: CN=0DB2682394F7EA6811A92576C413503AA5B3B7F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9e:81:b3:d4:f6:35:48:04:b4:aa:99:ec:7f: f6:3b:53:93:08:8d:95:78:87:47:8b:80:ae:72:7b: 1c:3d:c2:b4:07:da:47:a4:ee:5d:7c:3b:8e:1b:31: d9:4a:33:d5:eb:b2:34:c8:f1:47:1c:3d:11:5d:1d: a8:8c:dc:b2:92:f1:72:8c:88:12:d2:27:30:ed:25: 10:30:68:6a:b2:ff:f8:57:9a:a6:1a:74:1a:7f:07: 58:6d:32:b4:c5:8b:7e:2c:00:68:be:cd:42:85:21: f9:c5:ad:d6:ab:2c:90:a8:96:e7:fc:b6:89:bc:32: 08:6c:04:aa:f9:e0:14:dc:1b:de:40:9e:ab:76:87: 99:4a:47:77:1a:62:f2:49:9f:d4:06:86:14:ee:ec: 8d:06:3e:99:ba:14:13:9a:40:e0:11:5f:3b:1e:0f: 85:62:e9:99:43:57:ae:c6:29:a0:e6:d6:e3:a6:dd: 14:8e:ca:4f:a4:86:3a:ba:04:f2:71:50:b5:3a:30: 52:a5:bf:3e:63:0e:fd:a0:a9:00:a2:2c:fb:7e:e5: 9a:f9:41:a0:1e:cb:24:57:f6:df:bc:42:a7:a7:98: 52:5f:0f:ca:f5:89:b6:5e:44:2e:54:e0:9f:03:6e: 64:3a:7d:af:70:8e:65:bb:19:64:f7:01:d7:26:e9: 61:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B2:68:23:94:F7:EA:68:11:A9:25:76:C4:13:50:3A:A5:B3:B7:F1 X509v3 Authority Key Identifier: keyid:28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:bf:5e:16:86:bc:f2:a8:e4:92:da:75:58:23:a1:9d:87:b6: 8d:05:23:5f:24:d5:10:16:50:ea:82:fc:2f:50:2c:26:4e:63: bf:e5:19:34:80:d5:e4:be:20:e3:b2:fb:94:5b:8c:44:5d:cf: c0:26:9a:0a:f8:46:bf:98:ef:a6:51:4c:1c:69:67:a8:74:f6: 60:c8:4a:15:73:45:71:4c:e1:f9:ab:ed:9b:8e:2e:9c:02:59: 15:bd:f2:5f:16:31:a7:b1:a6:16:20:88:2d:6e:1b:14:cb:fe: ff:40:08:36:50:4c:90:59:2f:d2:18:aa:b5:fc:37:a0:ac:df: 7b:13:14:b5:59:64:56:1b:25:53:b7:9b:6c:78:83:18:62:de: f9:ce:4c:ce:43:25:fa:3e:e7:e9:74:fc:d3:5e:0b:eb:19:62: 1a:72:48:f6:e4:c0:52:67:75:11:19:45:18:9e:d2:56:9f:10: 2e:32:f6:a5:b8:94:26:c5:ee:44:24:77:c5:1e:95:17:1e:4e: 8b:eb:c2:0f:06:4c:cf:e5:07:7c:3f:c7:a5:67:0a:fe:4f:2d: b3:fd:fd:f9:30:8e:13:22:a4:80:13:93:76:96:52:2a:63:aa: 30:00:b3:f3:bc:52:12:42:b6:c1:1d:c8:7f:a6:53:67:33:6c: 50:1e:65:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMHwr16rrWcvXFoBdpne0VdtIu6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFC RjE1RDQ4NjAeFw0yNDExMjUxMDA2MTlaFw0yNDExMjgyMDA1MTlaMDMxMTAvBgNV BAMTKDBEQjI2ODIzOTRGN0VBNjgxMUE5MjU3NkM0MTM1MDNBQTVCM0I3RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEnoGz1PY1SAS0qpnsf/Y7U5MI jZV4h0eLgK5yexw9wrQH2kek7l18O44bMdlKM9XrsjTI8UccPRFdHaiM3LKS8XKM iBLSJzDtJRAwaGqy//hXmqYadBp/B1htMrTFi34sAGi+zUKFIfnFrdarLJColuf8 tom8MghsBKr54BTcG95Anqt2h5lKR3caYvJJn9QGhhTu7I0GPpm6FBOaQOARXzse D4Vi6ZlDV67GKaDm1uOm3RSOyk+khjq6BPJxULU6MFKlvz5jDv2gqQCiLPt+5Zr5 QaAeyyRX9t+8QqenmFJfD8r1ibZeRC5U4J8DbmQ6fa9wjmW7GWT3Adcm6WH1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDbJoI5T36mgRqSV2xBNQOqWzt/EwHwYDVR0j BBgwFoAUKGyaNi2Bd23XIfSawe2+Ub8V1IYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEyNzRjNi03ODNjLTRmM2QtYTliNi03NWIzYjQ2Zjg1NGMvMC8yODZDOUEzNjJE ODE3NzZERDcyMUY0OUFDMUVEQkU1MUJGMTVENDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFCRjE1 RDQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxMjc0YzYtNzgzYy00ZjNkLWE5 YjYtNzViM2I0NmY4NTRjLzAvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJF NTFCRjE1RDQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJy/XhaGvPKo5JLadVgjoZ2Hto0FI18k1RAW UOqC/C9QLCZOY7/lGTSA1eS+IOOy+5RbjERdz8Ammgr4Rr+Y76ZRTBxpZ6h09mDI ShVzRXFM4fmr7ZuOLpwCWRW98l8WMaexphYgiC1uGxTL/v9ACDZQTJBZL9IYqrX8 N6Cs33sTFLVZZFYbJVO3m2x4gxhi3vnOTM5DJfo+5+l0/NNeC+sZYhpySPbkwFJn dREZRRie0lafEC4y9qW4lCbF7kQkd8UelRceTovrwg8GTM/lB3w/x6VnCv5PLbP9 /fkwjhMipIATk3aWUipjqjAAs/O8UhJCtsEdyH+mU2czbFAeZeo= -----END CERTIFICATE-----Generated at Mon Nov 25 10:49:15 2024 by rpki-client on console-fra.rpki-client.org